v1.11.0

v1.11.0 (2023-01-09)

• 59bc50f7 feat: add helm upgrade e2e (#2222)
• 25f89737 fix: now route with connected/static will all be sync (#2231)
• c2467d21 add enable-metrics arg to disable metrics (#2232)
• 67024ec5 add u2o test case (#2203)
• f5d80110 add more args to break test server
• f5b9eef8 add release-1.8/1.9/1.10 to scheduled e2e (#2224)
• ab5a2c82 cni-server: fix waiting for routed annotation (#2225)
• 6fd9ea0c build(deps): bump golang.org/x/sys from 0.3.0 to 0.4.0 (#2223)
• cbde65e2 feature: detect ipv4 address conflict in underlay (#2208)
• 64d6f24f fix git ref name in e2e (#2218)
• b0cd45c6 fix e2e for v1.8 (#2216)
• 5843892b some fixes for e2e testing (#2207)
• b6a11789 build(deps): bump github.com/osrg/gobgp/v3 from 3.9.0 to 3.10.0 (#2209)
• 4f08d941 distinguish ippool process for dualstack and normal ippool situation (#2204)
• 098a8212 u2o feature (#2189)
• c0d76fd8 ovn nb and sb can't bind lan ip in ssl (#2200)
• 1489b65c build(deps): bump sigs.k8s.io/controller-runtime from 0.14.0 to 0.14.1 (#2199)
• 16002a28 local ip bind to service (#2195)
• 1407eba2 refactor e2e testing (#2078)
• 86fab667 fix: ovs gc just for pod if (#2187)
• 1a43c6de update docs link in install.sh (#2196)
• 02feb9a9 fix lr policy for default subnet with logical gateway enabled (#2177)
• 3e129fe1 sync delete pod process from release-1.9 (#2190)
• b6e50706 fix: update helm 1.11.0 (#2182)
• 3fb825c8 reserve pod eip static route when update vpc (#2185)
• 159fd9f0 ignore conflict check for pod ip crd (#2188)
• 4d6ad644 remove unused subnet status fields (#2178)
• 484fe97a fix:react leader elect (#2167)
• c914fe78 fix base/windows build (#2172)
• 6a8fc2f3 add metric interface_rx_multicast_packets (#2156)
• 2b5e28ff build(deps): bump github.com/onsi/gomega from 1.24.1 to 1.24.2 (#2168)
• 0992f36f update wechat link
• d45a0440 build(deps): bump github.com/Microsoft/hcsshim from 0.9.5 to 0.9.6 (#2161)
• adecee76 ci: refactor previous push multi arch (#2164)
• 5e4955c9 security: we should check all the vulnerabilities that can be fixed (#2163)
• 502a25bf An error occurred when netpol was added in double-stack mode (#2160)
• dbbbddc1 add process for delete networkpolicy start with number (#2157)
• 26f407fc security remove private key (#2159)
• 57457bd4 add scheduled e2e testing (#2144)
• 5444126a northd: fix race condition in health check (#2154)
• 755a46a6 add check for subnet cidr (#2153)
• c627468a delete nc cmd in image (#2148)
• 207a52cd bump k8s to v1.26 (#2152)
• a4a8b5ad add benchmark test for ipam (#2123)
• 4b1e78c2 update: add YuDong Wang into MAINTAINERS (#2147)
• 39ee1e7c build(deps): bump k8s.io/sample-controller from 0.25.4 to 0.25.5 (#2146)
• 7aa9bdbc delete nc in base image (#2141)
• aab79cb8 update go modules (#2142)
• fa32177d delete ip crd base on podName (#2143)
• 4072eb76 fix vpc spec external not true after init external gw (#2140)
• 51907e02 refactor ipam unit test (#2126)
• ad56e98f build(deps): bump github.com/k8snetworkplumbingwg/network-attachment-definition-client (#2139)
• 012ab59e some optimization for provider network status update (#2135)
• c410d8b4 simplify iptables eip nat (#2137)
• ef4e7555 kind: support to specify api server address/port (#2134)
• 9bbf5e43 kubectl-ko: fix registry/version (#2133)
• 2156ef0d check if subnet cidr is correct (#2136)
• f58c88fc fix: sometimes alloc ipv6 address failed sometimes ipam.GetStaticAddress return NoAvailableAddress (#2132)
• 27d22b7f fix: delete static route should consider dualstack (#2130)
• 9b38bf7f build(deps): bump github.com/osrg/gobgp/v3 from 3.8.0 to 3.9.0 (#2121)
• f9f63cae build(deps): bump github.com/Wifx/gonetworkmanager from 0.4.0 to 0.5.0 (#2122)
• 67b4dc1b build(deps): bump golang.org/x/time from 0.2.0 to 0.3.0 (#2120)
• 78584b7c fix: vlan gw clean in 2 scene (#2117)
• b8e15e19 optimize provider network (#2099)
• 66e96b8e build(deps): bump golang.org/x/sys from 0.2.0 to 0.3.0 (#2119)
• 625e3173 fix removing default static route in default vpc (#2116)
• 141c4c35 fix: eip deletion (#2118)
• ...

v1.10.7

v1.10.7 (2022-11-11)

• 6c2ff6ab set release for 1.10.7
• 0b47ca3d fix: Add support for Mellanox NIC (#1999)
• b2cd4df1 fix pinger namespace error (#2034)
• 7e2c3be7 increase action timeout
• 51dbde5e prepare release for 1.10.7
• 2cab58da fix: gateway route should stay still when node is pingable (#2011)
• f2bdb8ea iptables: avoid duplicate logging (#2028)
• d895b766 update np name with character prefix (#2024)
• 3267b0f5 bump kind and node image versions (#2023)
• 5db54e30 fix ovn nb/sb health check (#2019)
• 0633625b fix ovs fdb for the local bridge port (#2014)
• cf1ffcb2 do not need to delete pg when update networkpolicy (#1959)
• 381882c2 ci: upgrade deprecated actions (#2004)
• 071bebc6 fix: make ip deletion the same as creation (#2002)
• 1bf5fa96 fix: delete fiprule failed at first time (#1998)
• 9e51caaa add check of write to ovn sb db for ovn-controller (#1989)
• ce6536a4 fix grep matching device in routes (#1986)
• 14566316 delete pod after TerminationGracePeriodSeconds (#1984)
• 20ed648d ovs: fix waiting flows in underlay networking (#1983)
• 8c9232ce feature: support default vpc use nat gw pod as cust vpc (#1979)
• e7f3fb56 ovn db: recover automatically on startup if db corruption is detected (#1980)
• e430042f fix: modify src route priority (#1973)
• a62e0740 fix CVE-2022-32149
• d433f257 avoid concurrent subnet status update (#1976)
• 9e249b34 upgrade ovs-ovn pod by generation version instead of chart version (#1960)
• 916ae918 fix metrics name (#1977)
• f56bb0b0 add vm pod to ipam by ip when initIPAM (#1974)
• ffa04989 validate nbctl socket path in start-controller.sh
• 21b4b3f8 skip CVE-2022-3358 (#1972)
• 3f836950 use latest base image
• 2a1074e4 fix: add default deny acl (#1935)
• aa716033 ovs: fix mac learning in environments with hairpin enabled (#1943)
• 77c27d4b Fix registry for ovn-central container in install.sh (#1951)
• 1f1e3c28 ovs: add fdb update logging (#1941)
• eeaf796d add chart version check when upgrade ovs-ovn pod
• b0907efc fix underlay e2e testing (#1929)
• 4a80a485 set leader flag when get leader
• 5ef11cb4 set ovsdb-server vlog level to avoid warnings caused by ovs-vsctl (#1937)
• 122041c1 fix: pod mistaken ls label (#1925)
• 8996131a ignore pod without lsp when add pod to port-group
• ee1c306a add network partition check in ovn probes
• efa8f60d update ns annotation when subnet cidr changed (#1921)
• 3e00aa54 fix CVE-2022-27664
• 98f7bc08 fix EIP/SNAT on dynamic Pod annotation (#1918)
• bcaf1e7c fix: eip and nat crd can delete even if nat gw pod deleted and ipatab… (#1917)
• 95ebe009 fix: failed to add eip (#1898)
• 5e06b367 ci: increase golangci-lint timeout (#1894)
• 72a26074 fix: gatewaynode might be null (#1896)
• 5f5e85f6 fix: api rollback
• 63eb2551 fix: diskfull may lead to wrong raft status for ovs db (#1635)
• 2bc4f03e kubectl-ko: turn off pipefail for ovn leader check (#1891)
• ec0f1e4f update dpdk base image
• 503807e3 kubectl-ko: fix trace for KubeVirt VM (#1802)
• f961605a fix duplicate logs for leader election (#1886)
• 88473e63 fix setting ether dst addr for dnat (#1881)
• 704c179e refactor iptables rules (#1868)
• 7f399adf cni should handler unmont volume, when delete pod. (#1873)
• 3e54d9dd delete and recreate netem qos when update process (#1872)
• e52d3476 feat: check configuration (#1832)
• e92c85fa fix: nat gw pod should set default gw to net1 so that to access public (#1864)

Contributors

• Kaihang Zhang
• Mengxin Liu
• Noah
• bobz965
• hzma
• jeffy
• long.wang
• lut777
• runzhliu
• shane
• zhangzujian
• 张祖建
• 马洪贞

v1.9.14

v1.9.14 (2022-11-11)

• 9581d06b set release for 1.9.14
• 6ba9954f fix pinger namespace error (#2034)
• 0c9fd3f0 prepare release for 1.9.14
• 9cbb07a6 fix: gateway route should stay still when node is pingable (#2011)
• ab2a1f12 update np name with character prefix (#2024)
• ec4fe022 bump kind and node image versions (#2023)
• 5f9dca93 fix ovn nb/sb health check (#2019)
• d7e78b8a fix ovs fdb for the local bridge port (#2014)
• d41c467a do not need to delete pg when update networkpolicy (#1959)
• 52310595 add helm and e2e test (#1992)
• 85b8dd66 add check of write to ovn sb db for ovn-controller (#1989)

Contributors

• Noah
• hzma
• lut777
• zhangzujian
• 张祖建

v1.10.6

v1.10.6 (2022-08-30)

• 0b9f0c1f set release 1.10.6
• 1510905c feat: reduce downtime by increasing arp cache timeout
• 2b05fd4c feat: reduce wait time by counting the flow num.
• e5378927 fix: missing stop_ovn_daemon args
• 709ede03 delete log severity for drop acl when update networkpolicy
• c1e5be72 refactor: extract external routes from eip func, make it the same as … (#1671)
• 7bcf578e prepare release for 1.10.6
• ed237f9b ovs: fix log file descriptor leak in monitor process (#1855)
• e16667c3 fix ovs-ovn logging (#1848)
• a83ec475 fix: dnat port not use whole words to check (#1854)
• e3b41023 fix ovn dhcp not work with ovs-dpdk (#1853)
• 237e3189 update base image
• 05b27f2d fix: add and set ENABLE_KEEP_VM_IP=true to keep vm ip (#1702)
• a4030de5 fix: multus macvlan ipvlan use kube-ovn ipam，but ip not inited in init-ipam (#1843)
• 80053001 fix underlay e2e (#1828)
• 1a3a1694 fix arping error log (#1841)
• 9447b859 ko: fix kube-proxy check (#1842)
• 774b8d46 base: use patch from OVN upstream (#1844)
• 17d0f5af ci: switch environment to ubuntu-20.04 (#1838)
• 9f0d324a 修改 ovs-ovn-dpdk 容器镜像编译打包，解决容器中 ovs 运行不正常：无法添加物理网卡，无法创建 vhostuserclient port 问题 (#1831)
• 8c533548 windows: fix ovs/ovn versions and patches (#1830)
• d24c5131 update centralized subnet gateway ready patch operation (#1827)
• 02a4caf1 fix duplicate log for tunnel interface decision (#1823)
• b25f58f5 update ovs/ovn version to fix hardware offload (#1821)
• 842d6a34 fix: use full longest word to match full ip about dnat (#1825)
• f12fe0ea update centralize subnet gatewayNode until gw is ready (#1814)
• b9c591f9 initialize IPAM from IP CR with empty PodType for sts Pods (#1812)
• e57021fc kubectl-ko: fix missing env-check (#1804)
• 4c248112 kubectl-ko: fix destination mac (#1801)
• c21c57d1 abort kube-ovn-controller on leader change (#1797)
• d2939e9e avoid invalid ovn-nbctl daemon socket path (#1799)
• aa7b9c8f update vpc-nat-gateway base
• 7674b85f fix: warning for empty chassis fixed (#1787)

Contributors

• bobz965
• hzma
• long.wang
• lut777
• zhangzujian
• 张祖建

v1.9.9

v1.9.9 (2022-08-30)

• c4701fd2 set release 1.9.9
• 33d027af feat: reduce downtime by increasing arp cache timeout
• b90769f3 feat: reduce wait time by counting the flow num.
• 2afbe408 fix: missing stop_ovn_daemon args
• 37b9f2f8 delete log severity for drop acl when update networkpolicy
• 82026bbd base: use patch from OVN upstream (#1844)
• f9a2d8de prepare release for 1.9.9
• 7138087c ovs: fix log file descriptor leak in monitor process (#1855)
• c6f9565c fix ovs-ovn logging (#1848)
• b3a6998e fix: add and set ENABLE_KEEP_VM_IP=true to keep vm ip (#1702)
• 20ed2329 fix: multus macvlan ipvlan use kube-ovn ipam，but ip not inited in init-ipam (#1843)
• 4c40a20d fix underlay e2e (#1828)
• eb1706bc fix arping error log (#1841)
• 5757b8ec ko: fix kube-proxy check (#1842)
• 2000e996 ci: switch environment to ubuntu-20.04 (#1838)
• 919bb236 update centralized subnet gateway ready patch operation (#1827)
• 1c3b622c fix duplicate log for tunnel interface decision (#1823)
• e4d53217 update centralize subnet gatewayNode until gw is ready (#1814)
• d44de3e0 initialize IPAM from IP CR with empty PodType for sts Pods (#1812)
• 3eb1d1ad kubectl-ko: fix missing env-check (#1804)
• 5613b63c kubectl-ko: fix destination mac (#1801)
• 1284f15d abort kube-ovn-controller on leader change (#1797)
• 5bf8de0f avoid invalid ovn-nbctl daemon socket path (#1799)
• 4680e632 update vpc-nat-gateway base
• 4cce7870 fix: warning for empty chassis fixed (#1786)

Contributors

• Mengxin Liu
• bobz965
• hzma
• lut777
• zhangzujian
• 张祖建

v1.8.11

v1.8.11 (2022-08-30)

• 9f059091 set release 1.8.11
• 5fa2a8e1 feat: reduce downtime by increasing arp cache timeout
• c18cae4e feat: reduce wait time by counting the flow num.
• c8e36b5e fix: missing stop_ovn_daemon args
• e5735c20 delete log severity for drop acl when update networkpolicy (#1862)
• 4bcfb373 prepare release for 1.8.11
• 9d7f0a59 ovs: fix log file descriptor leak in monitor process (#1855)
• 446ee6a2 fix ovs-ovn logging (#1848)
• 63b218c6 fix: multus macvlan ipvlan use kube-ovn ipam，but ip not inited in init-ipam (#1843)
• 95c8ca4f ko: fix kube-proxy check (#1842)
• b7b7d26d avoid patch interface deletion & recreation during restart
• 2746a195 ci: switch environment to ubuntu-20.04 (#1838)
• cacb1ec4 fix base failure
• 3941595b update base image
• 2938daaa fix base build failure
• 122754aa update centralized subnet gateway ready patch operation
• c3f23af3 fix duplicate log for tunnel interface decision (#1823)
• 3d966bff update version to v1.8.10 (#1819)
• dfc89924 do not check static route conflict (#1817)
• a6403f0e update centralize subnet gatewayNode until gw is ready (#1814)
• 7103aae8 initialize IPAM from IP CR with empty PodType for sts Pods (#1812)
• b669c673 abort kube-ovn-controller on leader change (#1797)
• 0e0ea3c7 avoid invalid ovn-nbctl daemon socket path (#1799)
• a7f499dd do not wait dynamic address for pod (#1800)
• 2b34fd58 update vpc-nat-gateway base
• 8d2d0b1e append delete static route for sts pod (#1798)
• 9dc6e15e perf: fix memory leak
• 14beb484 perf: disable mlockall to reduce memory usage
• e6eace89 set sysctl variables on cni server startup (#1758)
• 020b20de fix: add omitempty to subnet spec (#1765)
• 3e77c51c fix CVE-2022-21698
• c5212982 add logrotate for kube-ovn log (#1740)
• ef275cc1 fix: cancel delete staticroute when it's used by NatRule (#1733)
• 513a30b5 fix: wrong info when update subnet from dual to ipv4 or ipv6. (#1726)
• aef889ae Get latest vpc data from apiserver instead of cache (#1684)

Contributors

• Mengxin Liu
• Wang Bo
• bobz965
• hzma
• xujunjie-cover
• zhangzujian
• 张祖建

v1.10.5

v1.10.5 (2022-08-10)

• 88531d50 set release v1.10.5
• 97031bdd prepare for release v1.10.5
• 4a34c5dd delete htb qos when releated annotation is deleted (#1788)
• 66643ba3 perf: fix memory leak
• 84aba41f perf: disable mlockall to reduce memory usage
• 35533738 fix iptables for services with external traffic policy set to Local (#1773)
• 32ee00b6 perf: reduce metrics labels (#1784)
• 93e74c60 northd: remove lookup_arp_ip actions (#1780)
• 6c7f45ef fix install error
• 86173506 fix:can not delete pod with sriov vf (#1654)
• dc77ceb3 dpdk-v2 ，--with-hybrid-dpdk 修改 Dockerfile.base-dpdk 解决 编译安装 ovs-dpdk 正常运行 (#1754)
• 7a1795e6 dpdk-v2 ，--with-hybrid-dpdk qemu 创建 sock 权限问题 (#1739)
• 0541ce98 feature: support exchange link names of OVS bridge and provider nic in underlay networks (#1736)
• 4617d7f7 support kubernetes v1.24 (#1761)
• 29f3d6ed use leases for leader election (#1529)
• f02df1a8 fix iptables for service traffic when external traffic policy set to local (#1728)
• 7f256965 set sysctl variables on cni server startup (#1758)
• 47e39fbf fix: add omitempty to subnet spec
• c9ac0cdf perf: replace jemalloc to reduce memory usage
• 7ffa99e3 avoid patch interface deletion & recreation during restart (#1741)
• 8fa4ca49 only support IPv4 snat in vpc-nat-gw when internal subnet is dual (#1747)
• a46b36d9 enqueue subnets after vpc update (#1722)
• 1bf5dc44 do not add subnet not processed by kube-ovn to vpc (#1735)
• 66d8be9f dpdk-v2 ，--with-hybrid-dpdk qemu 创建 sock 权限问题 (#1739)
• e9c27c60 fix: If pod has snat or eip, also need delete staticRoute when delete pod. (#1731)
• 7841f082 optimize lrp create for subnet in vpc (#1712)
• 994885c8 fix: cancel delete staticroute when it's used by NatRule (#1733)
• f9a84588 fix: wrong info when update subnet from dual to ipv4 or ipv6. (#1726)
• 77988f21 fix overlay MTU in vxlan/stt tunnels (#1693)

Contributors

• Mengxin Liu
• hzma
• long.wang
• xujunjie-cover
• zhouhui-Corigine
• 张祖建

v1.9.8

v1.9.8 (2022-08-10)

• 686d913c set release v1.9.8
• 8de35693 prepare for release v1.9.8
• 38ee8301 delete htb qos when releated annotation is deleted (#1788)
• 85bd5f94 perf: fix memory leak
• 46c970d6 perf: disable mlockall to reduce memory usage
• d7fd3793 perf: reduce metrics labels (#1784)
• d7a9f5e9 feature: support exchange link names of OVS bridge and provider nic in underlay networks (#1736)
• b966dd59 perf: replace jemalloc to reduce memory usage (#1764)
• 8bb8b173 fix: add omitempty to subnet spec (#1765)
• fd676437 set sysctl variables on cni server startup (#1758)
• 7c6250f3 avoid patch interface deletion & recreation during restart (#1741)
• a91056a3 enqueue subnets after vpc update (#1722)
• e895c5ff do not add subnet not processed by kube-ovn to vpc (#1735)
• f13f3f46 add logrotate for kube-ovn log (#1740)
• 70246fb9 fix: If pod has snat or eip, also need delete staticRoute when delete pod. (#1731)
• 76e3c670 fix iptables for service traffic when external traffic policy set to local(#1725)
• cee39213 optimize lrp create for subnet in vpc (#1712)
• 21f0b979 fix: cancel delete staticroute when it's used by NatRule (#1733)
• 4c2d0c86 fix: wrong info when update subnet from dual to ipv4 or ipv6. (#1726)
• 417176ed fix: new ovn-ic static route method adapted due to old ovn version (#1718)

Contributors

• Mengxin Liu
• hzma
• lut777
• xujunjie-cover
• zhangzujian
• 张祖建

v1.10.4

v1.10.4 (2022-07-18)

• 1e4a1959 set release 1.10.4
• 0bbcb389 prepare for release 1.10.4
• fb76c58e fix: response has no gw when create nic without default route (#1703)
• 55b3d508 ignore ovsdb-server/compact error: not storing a duplicate snapshot
• b6084777 Get latest vpc data from apiserver instead of cache (#1684)
• f447a1d5 update priority range in htb qos (#1688)
• bdfdc178 fix: clean vip eip snat dant fip in cleanup.sh (#1690)
• 460f930c add upgrade-ovs script (#1681)

Contributors

• Mengxin Liu
• Wang Bo
• bobz965
• hzma
• xujunjie-cover
• zhangzujian

v1.9.7

v1.9.7 (2022-07-18)

• eb412c96 set release 1.9.7
• 07bec2a2 prepare for release 1.9.7
• a798a8c2 Get latest vpc data from apiserver instead of cache (#1684)
• 8bc1b169 update priority range in htb qos (#1688)
• ef4673d2 add upgrade-ovs script (#1681)

Contributors

• Mengxin Liu
• Wang Bo
• hzma